Most Common Obfuscation Techniques In Fake AV Pages

This blog post analyzes Fake AV malicious webpages and their evasion/obfuscation techniques — including HTML entity encoding of content and attributes, random whitespace insertion, hex-encoded inline CSS and JavaScript, and light JavaScript obfuscation — used to frustrate IDS/antivirus signature detection; the author reports over 100 variants and highlights that attackers focus on detection evasion rather than concealing code.